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FIG. 2 
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FIG. 3 



r 



FIRST PROOF < 
52 



INPUT 



RANDOMIZE 
INSTANCE 



RANDOM NUMBER a FROM SETUP 
INSTANCE = (m,s) 
SECRET KEY x 



■60 



RANDOMIZED INSTANCE = (s,a,m) 



PROOF OF 
VALIDITY 



V 



•62 



PROOF THAT 



s = s a 
a = m 0 ^ 
m = m a 



FIG. 4 



INPUT <^ 



54- 




RANDOM NUMBER a FROM SETUP 
INSTANCE - (m,s) 
RANDOMIZED INSTANCE = (s,a,m) 
SECRET KEY x 



PROOF THAT < 



log m m = log^s 
log g y - log m a 



M. JAKOBSSON 15 



4/4 

FIG. 5 
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